diff --git a/svgs/docker-mailserver.svg b/svgs/docker-mailserver.svg index e907d456d..ff0863fdd 100644 --- a/svgs/docker-mailserver.svg +++ b/svgs/docker-mailserver.svg @@ -1,7 +1 @@ - - - - - - - + diff --git a/templates/compose/docker-mailserver.yaml b/templates/compose/docker-mailserver.yaml index 6a0aae661..94686dbde 100644 --- a/templates/compose/docker-mailserver.yaml +++ b/templates/compose/docker-mailserver.yaml @@ -20,6 +20,9 @@ services: - mail-state:/var/mail-state - mail-logs:/var/log/mail - mail-config:/tmp/docker-mailserver + # Mount Traefik's ACME certificate store (read-only) + # DMS natively reads acme.json and auto-reloads on cert renewal + - /data/coolify/proxy/acme.json:/etc/letsencrypt/acme.json:ro environment: # Postmaster account — the initial admin mailbox created on first boot - POSTMASTER_ADDRESS=postmaster@${MAIL_DOMAIN:?} @@ -33,10 +36,10 @@ services: - ONE_DIR=1 - PERMIT_DOCKER=none - # TLS — use letsencrypt when paired with Coolify's proxy, or manual certs - - SSL_TYPE=${SSL_TYPE:-} - - SSL_CERT_PATH=${SSL_CERT_PATH:-} - - SSL_KEY_PATH=${SSL_KEY_PATH:-} + # TLS — pre-configured for Coolify's Traefik proxy + # DMS reads Traefik's acme.json and extracts the matching certificate + - SSL_TYPE=letsencrypt + - SSL_DOMAIN=${MAIL_HOSTNAME:?mail}.${MAIL_DOMAIN:?} # DKIM / SPF / DMARC - ENABLE_OPENDKIM=${ENABLE_OPENDKIM:-1} @@ -69,7 +72,6 @@ services: cap_add: - NET_ADMIN - SYS_PTRACE - restart: unless-stopped entrypoint: - /bin/bash - -c